PrivEsc.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "DenyPrivEsc",
      "Effect": "Deny",
      "Action": [
        "codestar:AssociateTeamMember",
        "codestar:CreateProject",
        "ec2-instance-connect:SendSSHPublicKey",
        "glue:UpdateDevEndpoint",
        "iam:AddUserToGroup",
        "iam:AttachGroupPolicy",
        "iam:AttachRolePolicy",
        "iam:AttachUserPolicy",
        "iam:CreateAccessKey",
        "iam:CreateLoginProfile",
        "iam:CreatePolicyVersion",
        "iam:CreateServiceLinkedRole",
        "iam:CreateVirtualMFADevice",
        "iam:DeleteRolePermissionsBoundary",
        "iam:DeleteUserPermissionsBoundary",
        "iam:EnableMFADevice",
        "iam:PassRole",
        "iam:PutGroupPolicy",
        "iam:PutRolePermissionsBoundary",
        "iam:PutRolePolicy",
        "iam:PutUserPermissionsBoundary",
        "iam:PutUserPolicy",
        "iam:ResyncMFADevice",
        "iam:SetDefaultPolicyVersion",
        "iam:UpdateAssumeRolePolicy",
        "iam:UpdateLoginProfile"
      ],
      "Resource": "*"
    }
  ]
}